phpbb/phpBB
Ruslan Uzdenov 291a1fff1f [ticket/9903] Fix XSS in BBcode-parser's Flash-BBcode.
Fix XSS in Flash-BBcode by validating that the supplied argument is a URL.

PHPBB3-9903
2010-11-18 13:37:56 +01:00
..
adm [ticket/9850] Display upgrade instructions for feature release in acp 2010-11-02 23:53:14 +01:00
cache [ticket/9520] Removed per directory web.config files. 2010-05-03 19:31:40 +02:00
develop [task/set-permissions] shell script to set file permissions 2010-06-28 18:12:56 +02:00
docs [develop-olympus] Updating changelog for last minute 3.0.8-RC1 fixes. 2010-11-10 19:01:54 +01:00
download [ticket/9609] Change header() calls setting HTTP status to send_status_line(). 2010-09-11 22:01:31 +02:00
files [ticket/9520] Removed per directory web.config files. 2010-05-03 19:31:40 +02:00
images [ticket/9520] Removed per directory web.config files. 2010-05-03 19:31:40 +02:00
includes [ticket/9903] Fix XSS in BBcode-parser's Flash-BBcode. 2010-11-18 13:37:56 +01:00
install Merge branch 'ticket/nickvergessen/9140' into develop-olympus 2010-11-10 19:00:45 +01:00
language Merge branch 'ticket/sa007/9847' into develop-olympus 2010-11-08 12:48:19 +01:00
store [ticket/9520] Removed per directory web.config files. 2010-05-03 19:31:40 +02:00
styles [develop-olympus] Bumping version number for 3.0.8-RC1. 2010-11-08 23:21:27 +01:00
.htaccess [Feature] Ability to use HTTP authentication in ATOM feeds by passing the GET parameter auth=http 2010-01-19 19:08:51 +00:00
common.php [ticket/9830] Redirect to install directly when config.php does not exist. 2010-09-16 22:00:17 +02:00
cron.php dumdidum... sorry. ;) 2007-10-05 14:30:11 +00:00
faq.php populate who is online only where required 2009-08-12 10:30:37 +00:00
feed.php [ticket/9727] Smiley Path replacement in feeds is too generic 2010-07-18 11:51:13 -05:00
index.php [ticket/7720] Fix alternative image-description for unread posts. 2010-07-14 20:55:07 +02:00
mcp.php fix mcp sorting for pm_reports, and some minor language changes 2009-07-22 13:33:54 +00:00
memberlist.php [ticket/9772] Unify permissions for sending email when board_email_form is off 2010-08-28 15:49:47 -05:00
posting.php [ticket/9162] Prevent notice on unset poll title 2010-10-16 13:55:17 +02:00
report.php Fix Bug #54375 - Show correct HTML title when reporting private messages. 2009-11-24 14:27:17 +00:00
search.php Merge branch 'ticket/bantu/9613' into develop-olympus 2010-09-16 22:34:48 +02:00
style.php [ticket/9629] Allow style.php to retrieve its session ID from cookies 2010-07-11 01:35:01 +02:00
ucp.php [ticket/9785] Allow users to request new passwords when board is disabled. 2010-08-22 20:26:18 +02:00
viewforum.php Merge branch 'ticket/nickvergessen/7720' into develop-olympus 2010-07-14 20:55:49 +02:00
viewonline.php Fix bug #46215 - Adjust viewonline filename regular expression to be less strict. 2009-06-09 15:52:03 +00:00
viewtopic.php [ticket/9772] Unify permissions for sending email when board_email_form is off 2010-08-28 15:49:47 -05:00
web.config [ticket/9520] Additionally filter requests for {common,config}.php 2010-05-03 19:32:29 +02:00